Administrators should work through administrative systems (such as OSS) that change equipment on their behalf rather than holding privileged access to equipment (M17). Make critical, core and signalling security systems highly resilient to signalling attack by validating messages at the logical edge; ensure a signalling failure on an externally facing service cannot affect core nodes; expose only hub signalling addresses externally (except SS7 and GTP-C); authenticate outgoing signalling where standards support it; obfuscate customer data and identifiers before they leave; and hide network topology in signalling (M18). Due: Tier 1 and Tier 2 by 31 March 2028.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.